CVE-2005-1880

MediumCVSS 5.5/10Last modified Jun 16, 2026

Description

everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugs.gentoo.org/show_bug.cgi?id=94473Exploit, Issue Tracking
http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034422.htmlNot Applicable, Vendor Advisory
http://securitytracker.com/id?1014110Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.securityfocus.com/bid/13865Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.zataz.net/adviso/everybuddy-06062005.txtBroken Link, Vendor Advisory
http://bugs.gentoo.org/show_bug.cgi?id=94473Exploit, Issue Tracking
http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034422.htmlNot Applicable, Vendor Advisory
http://securitytracker.com/id?1014110Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.securityfocus.com/bid/13865Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.zataz.net/adviso/everybuddy-06062005.txtBroken Link, Vendor Advisory

Timeline

Published: Jun 6, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005